Key Takeaways
- Gibraltar's Companies House register makes some company details public while keeping others private, so owners should know exactly what appears on the record.
- Beneficial ownership information sits on a dedicated register with defined access rules, meaning ownership is recorded even where it is not openly public.
- Nominee directors and shareholders can reduce visibility on the public record, but they do not override beneficial ownership reporting or information exchange.
- International information exchange and data protection oversight by the GRA set real limits on privacy that non-resident owners should plan around.
Company Privacy in Gibraltar: What Owners Can Expect
Company privacy in Gibraltar rests not on secrecy but on a balance between limited public disclosure and full transparency to regulators. There is no dedicated confidentiality or secrecy statute; instead, what a foreign owner can shield, and what they cannot, follows from the interaction of company law, anti-money-laundering rules, and data protection law. Beneficial ownership is recorded in a public register, one of the few among UK Overseas Territories open to general search.
This article explains where the line falls between what the public can see and what stays private, and why some information that owners hope to keep confidential is, in practice, on the record. It is written for non-resident business owners, investors, and their advisers weighing incorporation in or compliance with the jurisdiction.
The Legal Framework Governing Corporate Confidentiality in Gibraltar
Corporate confidentiality is shaped by several instruments working together rather than a single privacy law. The Companies Act 2014, in force from 1 November 2014, governs incorporation, directors' duties, and filing obligations, and is administered by Companies House Gibraltar.
Two further pillars push the framework toward transparency. The Register of Ultimate Beneficial Owners, Nominators and Appointors Regulations 2017 require every incorporated entity to collect and report beneficial ownership data, while the Proceeds of Crime Act 2015 sets the anti-money-laundering regime and names supervisors including the Gibraltar Financial Services Commission.
A 2021 amendment to the Proceeds of Crime Act, effective 9 February 2021, refined the definition of "beneficial owner." Alongside these sits a UK–Gibraltar exchange-of-notes arrangement, in force 19 April 2016, committing the territory to a central register of current beneficial ownership data with unrestricted access for each side's law enforcement and tax authorities.
The practical result is that no statute exists to keep company ownership secret. Confidentiality is a matter of which records are public and which are restricted to authorities, not a protected legal status.
Company Incorporation in Gibraltar
Set up your company in Gibraltar with Expanship handling registration end to end.
Public versus Private: What the Companies House Gibraltar Register Discloses
The official registry is Companies House Gibraltar, run by the Registrar of Companies under the Government of Gibraltar. It handles formation, statutory filings, and public disclosure across companies, business names, private foundations, limited partnerships, LLPs, trade marks, and patents.
Records are available online through the e-Registry portal, but access requires a paid subscription. The register is closed to free automated searches, so third-party aggregators such as OpenCorporates can show only historic data.
A company search report reveals a defined set of fields, summarised below.
| Field | Disclosed |
|---|---|
| Company name and number | Yes |
| Registration type and date | Yes |
| Company status and status date | Yes |
| Registered office address | Yes |
| Authorised shares | Yes |
| Shareholders | Yes |
| Directors | Yes |
| Latest accounts filed | Yes |
Every company files annual accounts within 12 months of its year-end, with the level of detail set by its size classification: micro, small, medium-sized, or large. An Annual Return is also lodged each year, stating the registered office, directors, shareholders, secretaries, share capital, nature of activity, employee numbers, and any charges.
Incorporation is digital and costs £100 plus £10 stamp duty, with a straightforward private company typically formed within a few working days once papers are in order. The entity must keep a registered office in the jurisdiction, and only an FSC-licensed firm may supply that office service.
Director and Shareholder Visibility on the Public Record
Directors and shareholders appear on the public register, and that visibility extends to nominees as well. A private company limited by shares can be formed with a single director and a single shareholder, and both directors and shareholders may be natural persons or corporate bodies.
Shareholder details are disclosed even for a company limited by shares, and any change to officers or members must be notified to Companies House. This degree of openness places the territory among the more transparent of the offshore centres.
Ongoing Compliance in Gibraltar
Keep your Gibraltar entity compliant with filings, returns, and statutory obligations.
The Register of Beneficial Owners and Who Can Access It
The UBO Register, established under the 2017 regulations, requires every incorporated legal person to report accurate, current information on its ultimate beneficial owners. A beneficial owner is defined as anyone holding more than 25% of the voting rights.
Gibraltar has operated a publicly available beneficial ownership register since 2020 and was the first UK Overseas Territory to do so, remaining one of only three (with Montserrat and St Helena) to keep a fully public register. Access that once carried a fee of £2.50 per search is moving to free public search.
| Public on the register | Withheld from public view |
|---|---|
| Name | Full date of birth |
| Month and year of birth | Home address |
| Nationality | |
| Country of residence | |
| Nature of interest |
The Financial Services Commission is the competent authority for supervision and enforcement, with power to verify the accuracy of register data. Supplying false information or failing to file is a criminal offence: summary conviction draws a fine at level 5 on the standard scale, while conviction on indictment can mean up to two years' imprisonment, a fine, or both.
A narrow escape valve exists. Under Regulation 31, an owner facing exceptional circumstances, such as a genuine risk of fraud, kidnapping, blackmail, violence, or intimidation, may apply to withhold their information, though no exemptions were granted across 2021 to 2025.
Where many EU member states restricted access after the 2022 European Court of Justice ruling against mandatory full public access, Gibraltar held its course and broadened it. The upgrade aligns with preparation for the territory's forthcoming Moneyval assessment, the Council of Europe's evaluation of anti-money-laundering effectiveness.
Your name, month and year of birth, nationality, country of residence, and nature of interest are searchable at no cost. Only your full date of birth and home address stay off the public view.
Using Nominee Directors and Shareholders for Privacy
A private limited company paired with nominee director and shareholder arrangements gives the greatest confidentiality available under current law. A nominee is a professional party who acts as director or shareholder on behalf of the company, taking instruction from the beneficial owner.
Nominee shareholders hold shares for the ultimate owner without legal title, an arrangement set out in contract instruments: a declaration of trust or trust deed, the register of shareholders, and a pre-arranged instrument of transfer. These documents stay off the public companies register and are held by the regulated service provider.
The limits matter. Nominees still appear on the public registry, and the real owner must be disclosed both to the UBO Register and to the corporate service provider for anti-money-laundering checks.
Every obliged entity must carry out customer due diligence on all beneficial owners, including verification of identity, source of funds and wealth, and politically-exposed-person status. Using nominees therefore removes a name from the public record but never from the regulated intermediary's files.
A Gibraltar trust or foundation can be layered over the company to add a further dimension of privacy. Such structures attract growing scrutiny under BEPS, automatic information exchange, and international tax rules that examine where a company is genuinely managed and whether it has substance.
Gibraltar Incorporation Pricing
See transparent pricing to incorporate and maintain a company in Gibraltar.
Data Protection and the Gibraltar Regulatory Authority (GRA)
Data protection rests on the Data Protection Act 2004, amended in 2021, and the Gibraltar General Data Protection Regulation. The regulator is the Gibraltar Regulatory Authority, which serves as Information Commissioner.
From 1 January 2021 the Gibraltar GDPR took effect, carrying over the former EU regime as local law with modifications under EU-exit regulations. It governs how organisations collect, store, use, disclose, and transfer personal data, and the GRA enforces it.
Non-compliance penalties fall into two tiers: a higher maximum of £17.5 million or 4% of annual worldwide turnover, and a standard maximum of £8.7 million or 2%. Data breaches must be reported to the regulator within 72 hours, and organisations processing personal data must register in the Register of Data Controllers unless exempt.
One caveat deserves emphasis. This regime protects personal data held by organisations; it does not override the statutory duty to disclose directors, shareholders, and beneficial owners to Companies House or the UBO Register, which sit under separate company and anti-money-laundering law.
International Information Exchange and the Limits of Privacy
Financial privacy is constrained by a wide web of exchange arrangements. The territory was an early adopter of the OECD Common Reporting Standard, with legislation enacted on 22 December 2016 and first exchanges of account data on 30 September 2017 for the period ended 31 December 2016.
Tax data has flowed to the United States under FATCA since September 2015 and to the UK under their bilateral agreement since September 2016. FATCA operates on a Model 1 basis, so local financial institutions report to the Gibraltar Competent Authority, which then transmits to the IRS.
The reach of these arrangements is broad.
| Mechanism | Detail |
|---|---|
| TIEAs concluded | 27, including 14 EU member states |
| Multilateral Convention | Committed 2014 |
| Total EOI mechanisms | ~174 to OECD standard |
| Countries and territories covered | 121 |
| OECD Phase 2 rating (29 October 2014) | Largely Compliant |
A Country-by-Country Reporting regime arrived in 2017 under BEPS Action 13. Data quality is enforced rather than assumed: from 1 January 2021 the Competent Authority withheld data destined for certain jurisdictions, such as Bulgaria and Romania, pending completion of OECD-mandated confidentiality and data-safeguard plans, as PwC's tax summaries record.
The practical effect is straightforward. With automatic exchange covering more than a hundred jurisdictions, a non-resident owner's home tax authority is very likely to receive account information, so banking confidentiality is, in substance, gone for residents of CRS-participating countries.
Practical Privacy Strategies for Non-Resident Owners
The strongest available structure is a private limited company combined with nominee director and shareholder arrangements, keeping the owner's name off the public companies register while the UBO Register holds the underlying data. The nominee relationship is documented by a declaration of trust, the register of shareholders, and a pre-arranged instrument of transfer, all retained by the regulated provider.
Layering a trust or foundation over the company adds a further privacy dimension. Statutory registers of members, directors, charges, and beneficial owners must still be maintained and produced to competent authorities on demand.
Expect to provide full identification for everyone involved. For each director, shareholder, and beneficial owner, the service provider needs a certified passport or government ID plus certified proof of address, such as a utility bill or bank statement under three months old.
- Engage a regulated Company Manager for registered office, directorships, and corporate secretarial support, the most practical route for non-residents.
- Plan on the basis that your name, nationality, country of residence, and nature of interest are publicly searchable at no cost on the UBO portal.
- Treat Regulation 31 relief as a remote prospect; it applies only to genuine safety risks and requires formal application.
- Account for automatic tax data exchange; financial information will reach most home tax authorities regardless of structure.
The absence of foreign-exchange controls is a genuine operational benefit, letting a company move funds freely and hold accounts in any major currency.
Common Misconceptions About Gibraltar Company Privacy
Several beliefs about confidentiality here do not survive contact with the rules.
- "It is a secrecy jurisdiction like a classic offshore haven." It is positioned among the more transparent offshore centres, with strong anti-money-laundering and due diligence standards.
- "The beneficial ownership register is private." A public UBO register has existed since 2020, and search is moving to free access.
- "A nominee director keeps the real owner secret." Nominees are visible publicly, and the true owner is disclosed to the UBO Register and the service provider.
- "There is no GDPR or weak data protection." The Gibraltar GDPR took effect on 1 January 2021, mirroring the EU regime with minor changes, enforced by the GRA.
- "It does not share tax information." Around 174 exchange mechanisms cover 121 countries and territories, with automatic CRS exchange since 2017.
- "Company accounts are not publicly filed." Annual accounts are filed within 12 months of year-end, with detail set by company size.
- "You can keep your home address off all records." Home address and full date of birth stay private, but name, partial birth date, nationality, country of residence, and nature of interest are public.
Conclusion
Privacy here is real but limited and clearly bounded: your home address and full date of birth stay off public view, while your name and core ownership details are searchable, and your financial account data is reported automatically to your home country. Nominee arrangements can keep a name off the public companies register, yet they never hide ownership from the regulator or the service provider that must run due diligence on you. For a foreign owner, the sensible approach is to treat the jurisdiction as transparent by design and to structure with that reality in mind. The benefit lies in a credible, well-regulated home for a company, not in concealment.
How Expanship Can Help Your Business in Gibraltar
Expanship advises non-resident owners on what company privacy realistically means in this jurisdiction and helps structure ownership lawfully, from nominee arrangements and registered office services to correct UBO reporting and data-protection registration. Beyond confidentiality questions, we manage the full lifecycle of a foreign-owned entity so that disclosure and filing obligations are met without misstep.
- Company formation and incorporation with Companies House Gibraltar
- Registered agent and licensed registered office services
- Tax registration and annual return and accounts filing
- Ongoing compliance and UBO register management
- Accounting and bookkeeping support
- Introductions to banking and payment providers
To discuss your structure and obligations, contact Expanship Gibraltar.
Frequently Asked Questions
Shareholders and directors appear on the public companies register, and beneficial owners holding more than 25% of voting rights are listed on a publicly searchable UBO register. Your name, nationality, country of residence, and nature of interest are visible, while your full date of birth and home address are withheld.
Nominees keep your name off the public companies register, but they do not make you anonymous. The true owner must still be disclosed to the UBO Register and to the regulated corporate service provider, which is required to run customer due diligence on all beneficial owners.
Only in narrow cases under Regulation 31, where there is a genuine risk of fraud, kidnapping, blackmail, violence, or intimidation, and only after a formal application. No exemptions were granted across the 2021 to 2025 period, so relief should be treated as exceptional.
Almost certainly, where your country participates in the Common Reporting Standard. The jurisdiction has roughly 174 exchange-of-information mechanisms covering 121 countries and territories and has exchanged financial account data automatically since 30 September 2017.
Yes. The Gibraltar GDPR took effect on 1 January 2021, carrying over the EU regime as local law with minor modifications, and is enforced by the Gibraltar Regulatory Authority with breach reporting required within 72 hours.
Yes. Every company files annual accounts within 12 months of its year-end, with the level of detail depending on whether it is classified as micro, small, medium-sized, or large, alongside a yearly Annual Return.
Legal Disclaimer
The information provided in this article is for general informational purposes only and does not constitute legal, tax, or professional advice. While we strive to ensure the accuracy and timeliness of the content, laws and regulations are subject to change, and the application of laws can vary widely based on specific facts and circumstances.
Readers should not act upon this information without seeking professional counsel tailored to their individual situation. Expanship and its authors disclaim any liability for actions taken or not taken based on the content of this article.
For specific advice regarding your business setup, compliance requirements, or any legal matters, please consult with qualified legal and tax professionals in the relevant jurisdiction.
